Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
File: Lw47dY4ki4AfwfMNNF1giwevG_Y.cer (raw, json)
Hash identifier: IxcWS57o8yxB3JyDfSCx3IBw4hAwRaxYPKyEwJUJD6w=
Subject key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5AA14FD2287F002167528DA2F577
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 49798
IP: 185.140.28.0/22
IP: 2a0c:c500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:a1:4f:d2:28:7f:00:21:67:52:8d:a2:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:2c:3a:76:27:1e:97:26:14:4a:46:1b:16:
9b:2a:d8:7a:34:6a:12:33:12:24:43:be:93:0a:ae:
3b:cc:27:70:4f:e7:e3:68:7f:a2:c3:cf:cd:93:78:
7a:60:e6:a8:20:58:e1:1f:72:e3:c7:ab:31:7e:52:
a0:f5:c6:03:79:53:f4:15:0f:25:09:01:9a:ec:cd:
99:22:6a:6e:b3:58:97:05:42:20:21:e9:14:84:5b:
56:c1:fc:2b:d6:33:02:59:c0:9b:36:9f:98:22:49:
12:9b:58:2f:69:6f:9e:e0:d5:2f:aa:61:2f:32:a7:
92:16:dc:56:18:43:d2:cb:f2:fa:bb:58:83:6e:84:
f5:f0:ef:1e:bc:07:99:56:1d:cd:7d:a4:3d:95:15:
b8:39:80:a1:52:17:44:1d:9b:4b:5c:63:22:36:73:
d2:6d:77:8b:e4:6c:b1:be:72:5f:be:e6:6a:97:c7:
1d:e4:f6:59:83:14:71:21:b5:e9:68:48:b0:52:d4:
88:84:d9:08:3e:ed:a3:e2:40:fe:3b:29:2d:7a:b7:
b9:d9:2b:86:90:f6:5f:8c:3f:90:53:f9:d0:58:73:
13:ba:73:d4:a4:9d:34:17:17:eb:6f:5e:4d:43:fe:
df:2e:7a:3e:b6:b4:3f:20:61:8c:19:96:c5:06:4f:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.28.0/22
IPv6:
2a0c:c500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49798
Signature Algorithm: sha256WithRSAEncryption
5a:ba:a1:cd:eb:3b:a5:3d:c1:b4:5c:73:e1:28:cd:18:be:26:
ba:79:18:5b:56:95:c9:14:57:b8:51:f0:2b:0b:39:fc:2e:d9:
e7:54:fb:2d:dc:da:c5:a2:8c:de:ed:a9:a8:09:92:9d:a1:04:
bb:40:17:5c:21:b5:46:79:b9:5f:4a:48:d6:44:69:73:5a:a8:
f4:29:22:37:73:fd:00:85:26:ff:92:6a:08:0b:15:96:a9:04:
00:0d:b6:ad:91:16:e0:43:f1:1a:a9:c1:4a:c7:70:16:0f:31:
2a:3f:1b:fb:9a:f5:b4:c0:12:68:89:17:ea:b1:84:dd:2d:56:
71:cb:70:67:0b:50:f9:a1:47:61:47:43:ec:dd:87:31:95:e0:
d3:bd:69:53:87:45:9a:95:50:c1:27:79:fe:aa:d6:55:a9:b8:
45:9b:7d:61:1b:ca:40:aa:a3:a8:e9:e3:a2:99:8a:32:0b:f1:
a4:08:52:68:bd:4e:18:0e:b4:55:7b:18:63:71:be:78:6c:46:
44:9c:9a:64:9f:b4:ce:49:ba:c3:d9:b1:58:ef:de:36:7c:22:
2d:73:3b:7e:8a:50:ca:6c:cc:5a:17:4b:ff:cc:fe:05:ca:0b:
ec:e1:63:c3:48:c2:e3:fc:30:81:32:52:fc:af:39:25:69:57:
ac:c1:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:29:19 2024 by rpki-client on console-ams.rpki-client.org